What is a bit-stream copy?

The correct answer is A. Bit-Stream Copy is a bit-by-bit copy of the original storage medium and exact copy of the original. A bit-stream copy (also called a forensic image) is a sector-by-sector, bit-for-bit duplication of an entire storage medium. Unlike a standard file copy, it captures everything on the disk - including deleted files, slack space, unallocated clusters, and file system metadata…

Submitted by zhang_li· Apr 18, 2026Disk Forensics

Question

Options

ABit-Stream Copy is a bit-by-bit copy of the original storage medium and exact copy of the original
BA bit-stream image is the file that contains the NTFS files and folders of all the data on a disk or
CA bit-stream image is the file that contains the FAT32 files and folders of all the data on a disk or
DCreating a bit-stream image transfers only non-deleted files from the original disk to the image

How the community answered

(44 responses)

A
89% (39)
B
5% (2)
C
5% (2)
D
2% (1)

Explanation

A bit-stream copy (also called a forensic image) is a sector-by-sector, bit-for-bit duplication of an entire storage medium. Unlike a standard file copy, it captures everything on the disk - including deleted files, slack space, unallocated clusters, and file system metadata - producing an exact replica of the original. Option B and C incorrectly describe it as containing only NTFS or FAT32 files and folders, which omits the critical forensic property of capturing all raw data. Option D is wrong because bit-stream imaging does NOT exclude deleted files; it copies the entire disk regardless of file status.

Topics

#Bit-stream copy#Disk imaging#Forensic acquisition#Digital evidence preservation

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice